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(57) Abstract 

PURPOSE: To enable a high-speed processing by 
simplifying an arithmetic processing for remainder 
calculation. 

CONSTITUTION: A multiple table 5 containing multiplies 
of a modulus N of a remainder corresponding to 
prescribed low-order bits of an input register 1 is 
provided and retrieved on the basis of prescribed 
low-order bits of a number to be subjected to the 
remainder calculation T in the input register 1 to 
obtain a multiple of the modulus N of the remainder 
corresponding to the prescribed low-order bits of T. An 
adder 3 adds the multiple of the modulus N of the 
remainder, obtained by the indexing in the multiple 
table 5, to the contents of the input register 1. The 
contents of the input register 1 are updated with the 
prescribed high-order bits of the addition result of the 
adder 3 each time the addition by the adder 3 is 
performed (n) times as prescribed. A correcting device 4 
performs a correcting processing for (t) obtained as the 



addition result of the adder 3. 
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(i) fc> 

imba*^** (i) \mm$inz>®ffl&&<oT®m 

J*Jfc¥£ (2) fc, 

*WB««WS^« (2) T*ftfoitS*Jjfe©ifeoffif»t 
mUXli^^*? (l) ©rtsgtSrADg-fSfc fc<bfc, 

-etfI|BA^ I'S?*.* ( 1 ) OrtSft3E»N-5*:«)©*03(E 
#S (3) fc s 

ttHBAn^*© (3) <OjbP®^^»LT*J^*W«IE 

*aa*ife-rfcfero«iE#a (4) t £ jwrrs t 

[It** 2] flSf»H3£*S (2) tt, «3W*»OTffi 

(5) |r*U iOffiRRT— ^ (5) *mg. 

«lffii!l*o«feroffif«S:S»*«)a*e-eib5 r. fc £#m 
fc-f Sit** 1 l'IB«<DPJ^H-fl[igffl 0 
[It** 3] (2) tt, &*J&*Sc©T{£ 

(4 l) SrWE««|jS**OTte3fje^s' hTTtt* 
ft (4 2) fc, *J*OifeS:tftifrf5W*©ifeUi?^^ 

(12) fc, ttf!f&*cttttll$3« (4 2) 

»awffat#>ia*jjfe<oi!feu^^ (12) a»e>»fe*i,5 

M£©ftfc SrjftW-t- £**#ft (14) fc«r#U flWB 

(10) .ic i <o MwMm#*<DTimfe* 

£ fc £#$cfci-£IS** 1 (cGftoMAHISB. 

[88**4 ] a*«2 (osu^tf^afcffl^^ftfcx 

ft (6 2) fc, NIB|ft9£UllJ|&lg (6 2) T*ftf> 
*i»$#An*fe*©it©Tti:b tfj/ b© 2 ©*!!££*& 3 
fc»<0*t»*j£*& (6 4) fc, MIBMfc^^ft (6 
4) T# fc ftS «-^ffl(-m-r 5 x-^T Kl^K 

go 

[!t**5] tt»«©TffiA»fe3rftify bft©fi£fc?i 
R (7 5) fc v 

^©##J*3?gtt (7 5) ft>&ffiA&ft£gM*#$fe 

»i-5tasiiSMSfcv^^ (id fc, 

M8E»»sfe»i^** (11) lc^ilrt$^5»J^a© 



©I8$3l£¥ftfc, 

3S«©MIB*»i^*-©*0»l^-t-5 fc»©JbPg^ft 
(16) fc, 

MIE*P^#ft (16) ©*p*fe*K;S*L-r*!l*IS*©1i 

10 iE4aa^JS^fc&©M]E#ft (22) t &=rr 5 r. fc & 
i»**6] tmMi^^stii. mi\&&<DTimfe¥ 

(5 1) U ^<nm^r--f;v (5 1) 
15 »sfc«©Tffi3rJ£ry h-CttfgL-t, *^Hi»iS^aW 
|EWjft©«©ffif»&iff»*«)S*ft-C*>« - fc £#®fc 

[it** 7] ffiHBtJJ^fttt, «£fSc©T{imr£tr 

20. (4 1) SrMia^J^SScwT&Elf^tf-y htif LT, . 

»fc, MsfcOffi&tt^SM&Offil'S?** (12) 
fc, ftflfE{&IS1S#l?^ftt?^bn5miS^ir«riapJ 
&©8:l^** (12) a»fc#fci-L3*j5&!©S:fc£3jl# 
25 -r?.fcft©*»^ft (14) ' fc'fctfU w<D««»3e^ 

fti^i t> ffim®.m&M<DT&mj£. ^t> v k&jsi-s wis 
m^(om<oim £* * 5 #ft x-h z> r t £#m k -t 5 it 

**5 fc!Eite©*3l*J£fm3£Bo 

30 *f-t- ; 5*J^©^N^*5tt?)*]^Ti.odN = REDC (T 
* (R 2 modN) $r*feSfc»TR- 1 modN=REDC 

(t) znm-tsm&ii-wmmicjo^x, 
Aft$tizm\&&7*im-tz>xi3i'V** (id 

35 m&jji'&x* (id ici&ffls^ataibfeftTiDT 

U m' = (Tmodb) N' modb, r^TN' ^it/R 
40 ttfflSrefc.tK R=b\ b=2 k fc-T5) ^*»-5fc«) 

*fflHteSfc©^ftT-*fe btVS*J*©&N©(ftiScm' N 

ifil5A^^v ; x : 5'©rt§fc^aii-r5fcfc i bt^ ^ 

45 fSA*^v p ^©rt«*Hffi-ac:t^«t!3 t= (T+ 
mN) /RSrHi^-riAnJfiS (1 6) 
imiEftUHS (16) <Dim*tt*tfc#LTt<N<&»£ 
Bt©^t=REDC (T) % tSN©f^fit-N 
= REDC (T) t VX^iEimiMLTR-'mdN^ 

50 nzffiiEmm (22) fc'Sr*r«^fc&«f«ii-«ii* 
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9 1 «F»#£#S (52) » % »J&$tT<D 

ttlftLfcfiHR^-^ (5 1) Sr^U ^©(StScx-:/ 
^ (5 1) SrW8B«ail!j*»T©Tffi0f«tfy h-fl** L 

7—-f^ (4 1) Sr#IIE®PJ^T<OTffi^try b-c 

(4 2) f^0&N&ttfttt-£*lftZ>8: 
(12) WEffiHRfl!f«»3£#a (4 2) -e 
WfensffiMRflMRm 7 fcflflBWsferottsi'S?;** (12) 

a»fe»6>*ta«*©iicNk&«iri-a»jw (14) t 

3 3 ^ t i 1"5 If 8 |c|H«OW*«- 

[0001] 

D 0?T^=f D XA (Modulo Multiplication Without Tr 
ial Division, Peter L. Montgomery, Mathematics of C 
omputation, Volume 44, Number 170, April 1985 pp. 
519~528#fig) fcfflvNTv ASjSfcWifelHISrtf 5Wjfe» 

[0 0 0 2] 

***©«^S*L*:»*«r*y r-y-*£M*LT& 

Z , «LA(- 4 9 -t* L-tf — 8rSrt3 * if ©BHt 

[00 0 3] n*LfeOMH|!:»L"Clt*ft«(encryptio 
n technology) LfcBf^tm?-^ -^-^Ijffl^fg 



L/c^M^Bt^-^ (public key cryptosystem) tfSfcS 

So 

05 [0004] «f^fc**tt, AJ3IJ1-3 t «ftttiifM§-$ fc 
- 2 5. IBftflttft 

Ltfc©^ y±~ ^(CMLTlffgS-A^So 
[000 5] &BM»gHBRHU 3HB#tt4*W|§;h,Ty'»5 

15 fcTafltsrff5**T?*»5, t4fc*), ^umffiHBR-e 

[0 0 0 6] ^SlBt^Ttt, iA«(;ftfL4 
M4i«StBnA<0*5' h!7-^©i^n (n-1) 

[0 0 0 7] ^M^Bt^-CH s fiA^Sfcteft- 
30 tt5ilil»Q8HB«©*t*!J, sEWftttSHBrtft 

C7c»t-c, «*te<sMH-a*wa«4v\ nu &wi* 

t-^-t-s 7 r-Y^ir-r xttA# < *a. 
[0 0 0 8] ss«i**5R-ett, mi^L 

40 tf3HS*r*j<yt— ^Sr««lirffiffi*iftU 

.tt*DLTi£tk S(t«-pttPI*fcBjS*«|LTik«i-5 

45 -C#5<Dfi3f»:A7£*»t-r*)5tV^#fS^Jffl-r-5. j§(t 
50 V\ 
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[0009] -<dxo\z^ BE^tt-aMttes-asoa 

<b*r^ft*>©ri J l 9 7 7¥my 7^*r- 
(Rivest), ST (Shamir) joit^^'f > (Adlma 

n)<D3AI-±ot^$^fcRSA^-§-Cfe^o RSA 

[0 0 10] (RSAO&fcT^rfJJXA) Rf#8l 
(e, N) it^fSSfft (d, N) tv eiNli'i 

C = E (M) =M'modN 
M=D (C) =CWdN_ 

"tU d • e^TmodLCM { (p-1) , (q- 
1) ) 

N= p • q 

L CM : ft /.MM?H!&[ lowest common multiple] ; p , q 
[0 0 11] il?£\ e„ d, N, 1 2 tf j/ r- 

iSfiaffi-^juj^T 1 — X;k£5£ s *y =*y y ©r;^ y xa 
RS Aifr*K:fta§*i* ^flffl Sft 

-<#**j*T^^yxA^i«ii{ms-r^fcfe(- 
a, i mhit 9 ofj^r/v^" y xAossa^K* £*v 

[0012] r«5f!l*St3l<DaS3ift:©|^<D-*jfeT*> 

5^^^ y©Tyv=?yx^fcov^xsftw-r-5o 

(^t^dy y ©7;l'^!)XA) ^e^rf^ y (DT;W=ry X 
Att, fJ&OfeN (N>1) b s *J^cDfeNt2VM^ 

-cfes^R (r>n> %m^z>t, ««jfe«Ta»e>T 

R- 1 modN(DH-g[^SmRlCi5^cD^-TtTX.5 i t 

ff?T;^!)XAT?&5o N, N' \ R s R" 1 

^•tt^TttHfr-cfet), ^*J#i6:Ttt0ST<RN N r 

NN' =1 (0gR"'<N, OgN' <R) (Dm&%Wi 
[00 13] Sfel!:i©3S»RH:2©'<^*»SrffifflL 

•TfBfcfcs. wcr/^yxAitLx, t-tr-'bo 

dN©7^3*!)XAREDC (T) Sr^-f a {SU 



dyXAllc&I^T (T + mN) /Rtt&fttPWl 

[0 0 14] (7;V3'!)XAt) T^TR"'modN(DT 
;^!)XAREDC (T) J; 5 £ft<5„ 

05 m= (TmodR) N' modR 
t = (T + mN) /R 

if t<N then return t else return t — N 

REDC (T) = t (t<N) 
10 =t-N (t^N) 

[0 0 15] l|sl©REDCm SJ5&TmodN-m& 

<TR-WNijs*fcf ) n3it'ij-tfe5 0 ^er-e, PJ£ 

TmodN§-#:«>?> ftl-^-TJ: 51-REDC 

15 (T) fc^fe#*T:fcV^cR 2 modNfcC9^-^ f?T>*RE 

REDC (REDC (T) * (R 2 modN) ) 
= (TR 'modN) (R 2 modN) R-'modN 
= TR" 1 *R J *R 1 modN 
20 =TnodN 

r.Oi5i-LT, *J^TmodN r.t^T*^5 0 
[00 16] <REDC©#*ttfl»r3l^©14;3B> Jfc 

25 -So .'PsferofeN-^S^Ra^Sa*©^, REDC© 
(TmodR) N' ^mNOfHa, '#fi»«X#£»«- 

ftg<£&3T-*T*.3 £ 5 tc&KLfcTVva* y X A 2 
30 i~„ 

[0 0 17] (7/^!)XA2) REDC^liS^ 

tfc»L*:7VW=«y XAttJJcfc^i-J: 5 fc-fes. 

TASbJfifc-CT= (TmTm-TJ „ R=b\ 
b =2 k fcfefct)^tl5^, t^t^t" i =0~n - 1 
35 <Dm*>'ML!micXl!>TR- l mdN^f^ntmm^L 

[0 0 18] 

for 1=0 to n — I 
m' =T,N' aodb 



next 

if t<N then return t else return t-N 

roipt-LT^ffcil^TR-'modNt, ±i£L/c<fc? 
45 fc-f-J&sfci&T** Wc R 2 modN t ©gTfft>'RED C 

<5. 
[0 0 19] 

50 T/vdyXAtt, *»R^2©'«#*#:lc:-r$ct»=J: 
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[0 0 2 0] ^mfiJ^fO^^rOT/Vrf 

cDN' *s J;t>*R 2 modN^c»*tff^fti:LTia^^itn« 

«> v R 2 modNJ:i? t#<©«ia^fiBSri^St-r5b 15 
[00 2 1] Lfc#oT, **Wtt,. m&VcVlXteU£_ 

[00 2 2] 

J; 9 , JHsfetHS %m&&m U#£ &<o i 5 *«jdt© 
SJ&fH&ggfc Lfc 0 30 
[ 0 0 2 3 ] B Itt, 45W*WW8« 

SrfiW-T 5. -» »jreat2tt, Afl u s?*» lcoTfegr 35 

'fETQ TfeFrfe tr •> h t£»j6i-«»*©jfeN©_ 

# fe n 5 t (cm tx *tE#ys jfrf . 45 
[0024] ~©<fc 0 fcJ%fetfg3£Vtt, n !§]©»»)« 

fix afcWten, ^^fc^v^ y<or/u=fy xa 50 



= (Tmodb) N' modb, ^tN' JoitfRttSifc-C 
fct), R=b\ b = 2 k t-r^) ftWrtfiZtlfcfemr-- 
7*5 ZfemLX, «HEt0HsSfe«TOTffik e y Heft 

#n@»UigS*V, *D»^3^ffi*l-t= (T+mN) 
/R^ttn^o ^cD})P»3§3©tij£tf2, *SjE&g4 
fc^-x-fctts t<N©i^(i ; e©^t = REDC 

(T) x t^N©i^ttt-N=REDC (T) t L 
T. TR-'aiodN^ffctl-^o 

[0025] iSSwffifSfcy— ^/U5 ?r^t5r-^ 

nuxnbtiz&ffimm^Mfo-fz>7-~7frT k^(- 

[0026] roi? 5i f-^i-MKft J; t> . ff» 
lt#<O|alt!SftSrs6«fci-5<0-C, fifiRf 1 — 7VV5S: 

y hKttizzitxm&ffimm' mm-zimmLT- 

©{§|Sm' N£#«>3o r©»& % fefr 
[0 0 2 7] *»*J^ff»SStt. ±iELfc*J 

r ©^«*3¥SI«(0{il* ^±x!i LfcMj^BHSKfio AA 

[0 0 2 8] 
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JfSgB 2 lc % AAt'v^^ l ©feJ$«[©Tfit@f )6 y b 
[0 0 2 9] ^P^iaSf-^v^itll, «ft 

»Sg^5 2^^fflV^?,{^7 i -7'/^5^^-f5(0^, ffefe 

[0 0 3 0] **WteJ:a*jnH3fe«'»SSll-rtt, Sfcfe 

[00 3 1] 

<l«0W L > *«Wfc«53H*tl-#i!e«0» 1 ©HJ6« 
©lfc$ f *, % tc jo 5 *J&ffg&a©J^a£ 

✓n— K ? i T T^S Lfc t, <0 1? & £„ 
[00 3 2] 08 ©PJ&ff^SBfiU fr^m^tcm *) . 

R=b\ b = 2 k tLT, T— TR-'modNO^a^ff 
5t>©fcU TVi?7^11, Nl/y^^U^ N' W 
i?** 13, II <Dm$tf& 1 4; %KDW&& 15,® 

1 ©iD3¥3l 1 6 , gl©l/^17, -NU^l 
8 V *2Oi0jHSl9, %2.<D\/<?*9Z Ojb'iO'-fel/ 

^21 srjus-rs. 

[0 0 3 3] ® lWl^v^X^ 1 7, -NV-^!? 1 8 S 

2 1 tt N «IEigg2 2 5„ N' l/v?^13fc* 

*ji^i©^s^i *frt>*z>nftftmm%Mz 2 

[0 0 3 4] i^-e, M&©&N£a tf y K A£ffi£ 
a +n k If y h tfiSLT, JdfcOfJjfctWSKfco^ 
Tl/^llli, BlI^I^AAl/v 5 

l^** 1 2*5«fcT>'N' U-^^ 1 3(2, *|:a If y h 

^fcN' Sr-WPitSttrs. *2 0?*»S1 5tt % T 
^ f 1 1 c9{£f¥fa©T{S k If y h £ N' i^^^^i 



3©Tffik bf y h h S:*3f-fS. » 1 ©*JHI l 4 1):, 
©T&ktfy ht^*^i-5„ 

[0 0 3 5] JBiroftlJHSl 6tt, Tl/v'X^ 1 1<D{£ 
05 fW (a + nktfy h) i*103RJRgl4 0*#fe* 

(a + ktfj/h) i £An3?-f3„ « i l 6 ©Jn 
gfS* (a+nk+ltfyh) ©±ta+ (n-1) k 
+ 1 If 3/ MJT^^ 1 KOrt^S-HffLTnlll©^ 

10 tt, m 1 ©APS3& 1 6 <DMW&%(DT{<L k If y h 

3&#©Tfifca + 1 If y h&fltttU -N^^ 1 8 
f±, ^*-^-^b^*J*<0&N^S^< -NWffi (a + 

1 tTy H <S:«l#1-5o '*2 0?1PJ|CS1 9tt. 

1 7 co^mfit - Nl/^# 1 8 Oi&Wig- b Sr*P 
15 31 LT, ^ 2 © Wi/^? 2 0 |!lftjf§-t5o tl/?^2 
ltt, ^2©Ui?^ 2 0©a + 1 tfy h ©{£f$fli<S>*: 

LTftf^L, BE*±<ftlfyhas "1" ©i^l©!/ 

2o s?^^2o©««Hiesrm»r5. 

[0 0 3 6] ■ffcfrfc, f*fefHfS:tT5*&, tijMat 

nv^^ v N' i/^^ftitf-Ni/^^K 
A*S0W*aTfi» SfTl/^1 
25 l'te'-S-aLk*!/*. :OTU^? 1 IW^^iSOTfitk 

m2©*3f^l 5(CA^-T5o «2 0S63IIS1 5©*^ 
i£S©T{3:k If y hiNl/^X? i 2©£Mfite^i© 
*3I^ 1 4 ICAA L s -?-©*3t*S*t T 1/^^ 1 1 © 

30 ««Hti:SrJISi<D*n*Si6^A*i-5o T^^l 
ltll ©JP3f IS 16t ©H©yU— y&aolsJ&flSnifc 

as 1 OJOII* 1 6 ©JDjHg*<&_hfl: a + 
(n-1) k+ 1 tfy hSrHt^Tl^v?^.^ 1 1 ^A^3i- 
-5 0 ^-^g©(HlS5:75in{^L75:#^(a, ffl©AD3f 

35 *16OiBjfe*<0Tfi:k+ltryhBi»feTffia + k 
+ 2tfy hg*-C©a + lbry b^tJUJU MiEiSa 

2 2 ©Mi i © p n \n AJrt z 0 

[0 0 3 7] «iESSg2 2T*ti, A;££-BJI 1 © 
1 7tt:{£f$U ^©fi^pfiLt-NWi?^^ 1 8©^: 
40 tmk*%2<Dl)m&l 9ICA*U *Daf^*§rSI2© 
W-v 5 ^^ 2 OKU^&So ®2©Wi?X^ 2 0©±fi[l If 
5' WMt^?2 1©lM#tLT > ."1" 
^ttH 1 © l/-^^ 1 7 <Di&tmi>\ "0 - 
2©U-^^2 0©»fif{fi:*5-fe^^^2 l-C5S#l£*k 

[0 0 3 8] CiT, MEiSK2 2^*J(t5^att, * 
>-=f7< D ©T^=f !) X^Tft^^tfUffl t ^N^±©^ 

■&lcttNSr§|<ffls^o«ia-e*5. r: ©a 8 ©j: 5 

^©#-&, ffiHsscif^SB 3 2 (Dn^wsimhmzim^m 
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[0039] {^Bdi^siss 2<o^agfrii, 

«*Nfc^5*a»*OJSRi: k try 
[0040] '^Hlc«3M&tttlL£«ro& l o|Qfc« 

fi^ffCDfc&tfy b$:£a =5 1 2, k = 8, n = 6.4i 
L'-CflWM*5. 02 ft, {gmffi$Br-:^Kfr££ffl^fc 
JHjfcM#^©*/*«*L"CV' k «. 02fc*J^T, 08 

H 2 ©JWifetfJHSIltt, H8tR|«(0, Tl/-^ 
^11, NUS?** 1 2, gltOSISl 4, ftlOAD 
»16 is X VffijE'&W 2 2 fcftflH- 5o ffllESB 2 2 
tt, ^10^7^ 1 7, -Nl/»^ 1 8, %2<nto 
£819. f2Ol/^20*5Wtl/^?2lSrt 

[0 0 4 1] 0 2©fiJ^tf^g^j3V^fi. 

@8 ic:i8tta««ffir«*£a$ 3 1 mft*.-c, ftHBtmax 

-tVw 1 Srfll^fc^S«WimiFSW4 2'SrK»tT^5. 

ltt, 1 0 2 4 tfy b©A^7^^^T-fcU, £0>TI- 
1 lfctt, «3MjS%»T*J±pt»l©iD3l»l 6© 

tt, (S8f^^tf§2 5 6©T-/;VC > TU-^ 

I i<oTtt8tr'y hT?*3i-rs 1 8 try how&mn 

5 1 2 try 

[004 2] *l©*JMil4HU 8tfyhX512tf 

£nv$?**i 2©fiH^4:©*£&fr5o ftioflpl?: 

3gl6li, 10 25tfyKDjn|HlTS)t), Tl/^^ 

I I tfHfcfHi fc ft 1 <nmm 1 4 <dm%* 

fto. MiEK®2 2{i, 0 8tD4§IEgg2 2fc|^Ct© 

[004 3] {&fttittK#£&'4 2 <D®kmiWr~zf)\>A 
IB, Sat^-f-iplc^fcN' ©Tfi8 tfy h$rJD» 
2§ICJ; 9 2 5 5 SJSjfcbD* U g*©Tffi 8 tfy h £AP 
^0f5:£T Ki^xi: LTx— ^HkLfcfcco-efeS. & 
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